WooYun.org

function admin_account_add($post) {
    global $db;
    global $res;
    global $lang;
    if(!ci($post['txt_name'], 'name',3,20)){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['user'].':'.$lang['namereq3']);
        return;
    }
    if(!ci($post['t_name'],'realname',3,20)){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['realname'].':'.$lang['error_realname']);
        return;
    }
    if(!ci($post['t_dept'],'realname',0,20)){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['dept'].':'.$lang['error_realname2']);
        return;
    }
    if(!ci($post['email'],'email')){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['email'].':'.$lang['error_email']);
        return;
    }
    if(!ci($post['t_desc'],'realname',0,100)){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['desc'].':'.$lang['error_role_desc']);
        return;
    }
    if($post['sel_role']=="-1"){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['emptyform'].":".$lang['adminrole']);
        return;
    }
    if(!ci($post['pas_password'], 'uaname',5,20)){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['password'].':'.$lang['admin_pwd_error']);
        return;
    }
    if($post['pas_password'] != $post['pas_password2']){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['rtpass'].':'.$lang['passerr']);
        return;
    }
    $count=$db->countOf("oft_operators", "name= binary '".$post['txt_name']."'");
    if($count>0){
        $res->set_resultcode('-2');
        $res->set_resultstr($lang['dupname']);
        return;
    }
    
    $sql0="insert into oft_operators (name, realname, department, contact, descript, password, state, user_type, role_id,email) values ('".$post['txt_name']."', '".$post['t_name']."', '".$post['t_dept']."', '".$post['t_contact']."', '".$post['t_desc']."', '".md5($post['pas_password'])."', '".(isset($post['chk_state']) ? 1:0)."', '".$post['object_type']."', '".$post['sel_role']."', '".$post['email']."')";
    $db->execute($sql0);
    $new_id=$db->lastInsertedId();
    $sqla=array();
    if($post['object_type']=='1' || $post['object_type']=='2') {
        for($i=count($post['sel_obj']);$i>0;$i--){
            $sqla[]="insert into oft_oper_user values('".$new_id."','".$post['sel_obj'][$i-1]."')";
        }
    }
    $db->execute('start transaction');
    foreach($sqla as $sqlstr) {
        if(!$db->execute($sqlstr)) {
            $db->execute('rollback');
            $res->set_resultcode('-4');
            $res->set_resultstr($lang['dberr']);
            return;
        }
    }
    $db->execute("commit");
    $GLOBALS['logs']->writelog(CATEGORY_OPERATE,'Add','Add account '.$post['t_name'],$post['hid_path'],'Add account');
    $res->set_resultcode('0');
    $res->set_resultstr($lang['success']);
}